CVE-2016-9099

Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:broadcom:advanced_secure_gateway:6.6:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:6.6:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-11 14:30

Updated : 2024-02-28 15:44


NVD link : CVE-2016-9099

Mitre link : CVE-2016-9099

CVE.ORG link : CVE-2016-9099


JSON object : View

Products Affected

broadcom

  • advanced_secure_gateway
  • symantec_proxysg
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')